# Configuring Kibana with SSL; how to define passphrase for the private key?
**URL:** https://discuss.elastic.co/t/configuring-kibana-with-ssl-how-to-define-passphrase-for-the-private-key/2464
**Category:** Kibana
**Created:** [June 11, 2015, 1:11pm UTC](https://discuss.elastic.co/t/configuring-kibana-with-ssl-how-to-define-passphrase-for-the-private-key/2464 "2015-06-11T13:11:53Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Jakauppila](https://discuss.elastic.co/u/Jakauppila)
#### Post date: [June 11, 2015, 1:11pm UTC](https://discuss.elastic.co/t/configuring-kibana-with-ssl-how-to-define-passphrase-for-the-private-key/2464/1 "2015-06-11T13:11:53Z")
I'm going through the steps of configuring Kibana via kibana.yml to use SSL for the accessing clients:
```
# SSL for outgoing requests from the Kibana Server (PEM formatted)
#ssl_key_file: /path/to/your/server.key
#ssl_cert_file: /path/to/your/server.crt
ssl_cert_file: D:\certs\KibanaCert.crt
ssl_key_file: D:\certs\KibanaCert.pem
```
How do you specify the passphrase for the private key?
---
### Author:  [@simianhacker](https://discuss.elastic.co/u/simianhacker)
#### Post date: [June 17, 2015, 5:28am UTC](https://discuss.elastic.co/t/configuring-kibana-with-ssl-how-to-define-passphrase-for-the-private-key/2464/2 "2015-06-17T05:28:06Z")
There isn't a way to specify a passphrase. Most people remove the passphrase from their keys using OpenSSL.
```
openssl rsa -in www.key -out new.key
```
---
### Author:  [@Jakauppila](https://discuss.elastic.co/u/Jakauppila)
#### Post date: [June 17, 2015, 3:10pm UTC](https://discuss.elastic.co/t/configuring-kibana-with-ssl-how-to-define-passphrase-for-the-private-key/2464/3 "2015-06-17T15:10:43Z")
Yeah, I did that to get it working, but I'm not a fan of it as a long-term solution.
---
### Author:  [@simianhacker](https://discuss.elastic.co/u/simianhacker)
#### Post date: [June 17, 2015, 5:08pm UTC](https://discuss.elastic.co/t/configuring-kibana-with-ssl-how-to-define-passphrase-for-the-private-key/2464/4 "2015-06-17T17:08:27Z")
What would you prefer for a long term solution?
For systems that need to be automatically started without human intervention the options I know about are:
- Passphraseless SSL Key
- Store passphrase in config and pass as an argument to TLS server (just as insecure as first scenario)
- Prompt user for passphrase (doesn't scale and requires human intervention or requires an expect script with passphrase; which is also insecure)
Thoughts?
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 2:17pm UTC](https://discuss.elastic.co/t/configuring-kibana-with-ssl-how-to-define-passphrase-for-the-private-key/2464/5 "2017-07-06T14:17:54Z")